Very useful, thank you! What is the significance of selecting "Full Control" when setting the permissions? Does that restrict the type of access being audited?
very well explained, Sir I have two important questions after watching. First, is it advisable to configure auditing Drives (having multiples folders some shared some or not) OR should auditing be done on individual folders, the second question is under a local policy we have AT two places where we can enable auditing the first place is under Branch local security policy\local policies\audit object Access. The second branch is the (Advanced Audit policy Configuration\System\Audit Policies-Local Group Policy Object\Object Access) - what is the difference, and what branch makes what difference. I hope you can reply on it
